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Cllalm 1: fCancelted^ 

Claim 2: (Currently Amended) 

2 . The method of Claim +3 wherein transmitting step ^'a." occurs witiirn a single computer 
system. 

CPaim 3: (Cun'entlv Amended) 

3. Th e m e thod of c l a i m 1 A method for use with for use with a computer system 
having an Internet visible web server accessible to a web browser for sending response 
messages fulfilling calls from said web browser by sending back to said web browser an 
item requested in said calls, the method comprisino: 

a. transmitting a received _call_from_said Internet visible web server to an 
Gateway CGI (Gateway CGI). 

b. transferring, via said Gateway CGI, internet visible Web server the call to an 
Gateway CGI program. 

c. extracting and packaging said cajl by said Gateway CGI program into an 
Encoded Reguest Package (ERP) with sufficient information to recor^truct 
the call. 

0, ppt^|?!|shfnq, via saiq Q^tew^y CQI, a soqM \9 PQmm^n^P^t^ wjth an 
Instance of a second server ihereinaf ter an ACM) in a secure part of said 
computer system, 

e. transmitting information embodied in the original request in said ERR to said 
ACM. 

f. reconstructing said call by said ACM. 

Q. attempting to verify access priyileges for said call. 

iL if access privileges are verified, retrieving, bv said ACM, said item reouested 

by said call. 

L forwarding said Item to said internet visible web server, 

1. sending_said item_to_said GatewayJiiGLacross said socket. 
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k. serving said Item In a messacie to said web browser from said Internet visible 
web server: 

wherein said establishing step "d," occurs by first signaling from said Gateway CGI to a 
Daenrion in said secure part of said computer system across an establishment socket to 
which said Daemon is attuned, establishing an Instance of said ACM by said Daemon and 
attaching said ACM to a communteations socket through which all further communication 
between said ACM and Gateway CGI shall occur, and port information is sent to said 
Gateway CGI from said Daemon to indteate on which port said ACM will communicate with 
said Gateway CGI. 

Claim 4: fOriainan 

4. The method of claim 3 wherein said signaling and said all further communicattons Is 
encrypted. 

Claims: fOrlalnan 

5. The method of claim 3 wherein said signaling does not contain an ERP. 

Claim 6; fOriqinaO 

6. The method of claim 3 wherein said signaling does contain an ERP and wherein 
said establishing of an instance of said ACM by said Daemon includes transfer of said ERP 
to said ACM. 

Claim 7! fCurrentlvAmended) 

7. The method of Claim +3 wherein In step "g " wherein the ACM does the verification 
and if the ACM fails to verify the call, the ACM terminates. 

Claim 8: fCurrentIv Amended) 

8. Tiie method of Claim + 3 wherein in step "g-" wherein the ACM does the verification 
and if the ACM fails to verify the call, the ACM returns a request for a log-on. 
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Cllaim9; fOriainal) 

9. The method of claim 8 wherein the ACM embeds user request information in the 
logon request. 

CPalm 10: fCurrerrtIv Amended) 

1 0. The method of Claim 4- 3 wherein in step "g/ wherein the ACM does the verfficatlon 
and If the ACM falls to verify the call, the ACM communicates tfiis failure to said Gateway 
CGI and awaits further verification information. 

CPaimll; fCurrentIv Amended) 

1 1 . The method of Claim 4 3 wherein said step "h." includes activating a CGI on said 
secure system. 

Cialm 12: fCaneelled) 

Cialm 13: fCurrently Amended) 

1 3. The method of claim 42 g4 wherein said receh/Ing step comprises, receiving a call at 
a dispatcher, selecting a one of a set of IVWsen/ers by said dispatcher, and sending said 
call to said selected one by said dispatcher. 

Claim 14: fCunrentIv Amended) 

1 4. The method of Claim 4S 24 wherein said establishing occurs by first signaling from 
said Gateway CGI to a Daemon in said secure computer system across an establishment 
socket to which said Daemon is attuned, establishing an instance of said ACM program by 
said Daemon and attaching said ACM to a communications socket through which ail further 
communication between said ACM and Gateway CGI shall occur. 

Claim 15: fOriqinal) 

1 5. The method of claim 1 4 wherein said Daemon signals said Gateway CGI infomrmtion 
regarding the communications socket. 
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Claim 16: (Currently Amended) 

1 6. The method of Giaim 4^ 24 wherein said executing includes activating a CGI on said 
secure computer system. 

Claim 17: (Orkiinal) 

17. The method of claim 16 wherein said activated CQI is a session controller for a 
database and wherein said session controller maintains an open session for a user to use 
data in a working database. 

Claim 18: fOrialnal) 

1 8. The method of claim 1 7 wherein said working database is not located on said secure 
computer system but on an intranet and said session controller maintains an open session 
through an intranet firewall. 

Claim 19: (Currently Amended^ 

19. The method of Claim 43 24 wherein said authenticating requires matching of 
infomnation transfenred by the web browser to expected information. 

Claim 20: fOriainan 

20. The method of Claim 1 9 wherein a session controller further authenticates the call. 
Claim 21; fOrlolnah 

21. The n^thod of dalm 19 wherein said secure computer system maintains a user 
database for containing at least some of said expected information- 

Clalm 22: (Currently Amended) 

22. The method of Claim 42 24 wherein said executing includes retrieving files, including 
those file types in the set {HTML, image, data} from said secure computer system. 
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Claim 23; (Currently Amended) 

23. The method of Claim 4S 24 comprising a step prior to said establishing an 
IVWsen^er to receive calls from web browsers on the internet wherein said prior step 
comprises: 

receiving at a dispatcher all calls from web browsers, and 

routing each received call to an available IVWserver in a pool of IVWservers. 

Claim 24; (Currently Amended) 

24, Tho method of Cla i m 12 A method for operating a web server comprising; 

establishing an Internet visible web server (hereinafter IVWservert to receive 
calls from web browsers on the intemet, 
receiving said calls, 

relayino said calls to an Gateway CQI on a same computer system wrth said 
IVWserver. 

packaging information from said calls into an Encoded Request Packet f ERP^ 
sirfficient to reconstruct said calls from said ERR, 

establishino a communication channel between said Gateway CGI and an 
Access Control Management (ACM) program on said secure computer system. 

authenticating the call. 

sending the ERP to s^ld ACM program, 

reconstructing the call bv said ACM program. 

executing the call bvthe ACM program. 

sending a result from said call execution to said GatewayLC_GL 

providing said result to said IVWserver. 
sending said resuit to said web browser; 

wherein said step of establishing a communication channel between said Gateway CGI and 

an ACM program on said secure computer system comprises: 

contacting a Daemon on said secure computer system by said Gateway CGI, 
sending a request for an ACM to said Daemon by said Gateway CGI 

spawning an ACM by said Daemon, 

sending port information to said Gateway CGI from said Daemon to 

indicate on which port said ACM will communicate with said Gateway CGI. 
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Ctaim25; fCancelled) 
Claim 26; (Cancelled) 
Claim 27: ^Cancelled) 
Claim 28: fC anoelled) 
Claim 29: (Cancelled) 
Claim 30: (Cancelled) 
Claim 31 : (Cancelled) 
Claim 32: (Cancelled) 
Claim 33; (Cancelled) 
Claim 34: (Cancelled) 
Claim 35: (Cancelled) 
Claim 36: Cancelled) 
Claim 37; (Cancelled) 
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38. An Access Control Manager (ACM) program for retrieving secure information from 
within a secure zone and sending said secure information to an internet visible zone, said 
ACIVI program comprising: 

means for receiving a data package containing call information in a packaged 
form comprising call identification infomiation signals and URL identifying signals, 

means for unpacking said data package and reconstituting a call from said 
call Information, 

Web sen/er means to act on said call and produce a reply. 

Claim 39: Withdrawn) 

39. A secure zone computer system comprising: 

at least two ports for forming socket connections to a first web sender program 
on an internet visible zone, 

a monitoring Daemon for monitoring a first of said two ports for gateway CGI 
communications and for spawning an Access Control Manager and assigning said 
Access Control Manager to a second of said two ports for enabling socket 
communications between said Access Control Manager and said gateway CGI. 
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